$ rpki-client -vvf rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft File: MjnArILZQnKmoJ37KpCmZzCbOHM.mft (raw, json) Hash identifier: soeiHXyReJzyS12yk+/WmgyaAlnTPLlsQwjHRIVrkbs= Subject key identifier: DB:15:F6:B0:84:E7:A9:C6:0C:B5:9D:21:C4:4B:25:87:D5:41:F7:64 Authority key identifier: 32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73 Certificate issuer: /CN=A9152643/serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873 Certificate serial: 0380 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft Manifest number: 037D Signing time: Sat 27 Apr 2024 02:39:01 +0000 Manifest this update: Sat 27 Apr 2024 02:39:00 +0000 Manifest next update: Sat 04 May 2024 02:39:00 +0000 Files and hashes: 1: MjnArILZQnKmoJ37KpCmZzCbOHM.crl (hash: ScCiBDeKyuDbkgXWP5s/clgjJA4HLzTACVXRRUuunAw=) 2: 36837F32574A11EC911FAC86C4F9AE02.roa (hash: 9JXpvGvbKZZ6wal+I+4NgtnbORBILpr16m8wSCjrcTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 02:39:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 896 (0x380) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152643/serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873 Validity Not Before: Apr 27 02:39:00 2024 GMT Not After : May 4 02:39:00 2024 GMT Subject: CN=662c6545-9d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1e:4a:b2:a8:8a:72:6b:72:4c:ba:e1:9a:6e: 90:a5:ba:27:57:37:3f:7a:91:7a:b7:d3:65:13:34: 3a:a7:6e:09:2d:e2:ae:85:00:15:ad:f4:6e:ac:e7: 33:b9:74:74:66:b4:1c:af:67:ea:f1:ad:96:c6:44: 2f:cf:ed:dc:bd:ac:06:3e:b8:13:c4:83:f8:d7:33: 9c:e2:f6:29:71:35:0f:19:e5:0e:ee:01:52:10:3a: d3:c4:fb:04:12:5b:4d:89:31:00:93:90:c5:b7:a9: fd:52:ce:1f:eb:bb:da:ce:8c:e1:00:e9:b5:0a:e8: cb:f5:15:5d:89:89:eb:36:35:28:26:fa:4d:aa:80: f4:61:c7:21:40:a1:cb:ac:15:ca:d1:ce:d9:2c:bd: fb:14:b8:d4:79:5e:b1:21:2e:f2:63:e5:ad:97:b8: 57:e7:da:0f:be:69:52:9b:c1:e8:fd:24:62:ae:94: d6:84:36:48:bf:1d:f1:16:a7:2e:6d:26:69:fa:61: fe:4e:75:07:2d:7e:68:e2:c0:ba:5d:76:94:48:4e: 1d:25:09:64:88:f3:5b:4e:8a:02:b3:e7:40:39:b3: fa:6b:eb:9e:e9:d4:e3:29:70:f8:17:0c:0d:d8:ec: fc:8f:d8:4d:cc:87:f2:92:c9:dd:1d:07:82:28:6d: 65:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:15:F6:B0:84:E7:A9:C6:0C:B5:9D:21:C4:4B:25:87:D5:41:F7:64 X509v3 Authority Key Identifier: keyid:32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:8b:33:30:e9:16:8b:23:4e:c5:64:b8:43:6d:03:cb:21:42: ab:79:14:b8:8a:e6:f2:f1:a0:45:bf:92:78:44:ad:15:41:a2: 0d:57:b3:4c:aa:fa:10:12:c1:15:b7:b6:86:66:51:d8:34:8a: cf:01:c7:6f:08:84:d7:00:20:78:1a:3f:02:e3:d8:b4:af:fa: 23:cf:26:c5:a5:b9:7c:16:a7:9a:bd:35:56:08:2b:fc:37:80: 8e:4d:38:6b:18:94:6c:12:15:f5:d1:01:e2:c8:ee:57:d3:c8: f1:ea:eb:8c:71:7d:89:0b:18:ef:ee:f3:d3:6f:7c:6f:6e:c6: 07:26:a9:e3:13:76:a6:e2:3b:20:73:f3:03:c1:fe:56:0c:16: 70:02:93:d2:9e:45:00:2c:14:25:48:f3:cb:52:66:ad:8c:e4: 60:6e:93:ef:de:33:04:ea:21:23:40:e6:eb:aa:d9:2e:7d:31: f4:01:fd:7e:03:f1:2a:1c:90:f7:be:74:e2:70:40:4f:dc:04: 44:51:1c:eb:79:e9:5d:ef:58:b0:ae:f9:35:4f:da:78:d6:a2: 3f:c7:96:b9:6b:7b:9b:eb:0a:64:07:40:59:f3:f3:27:4e:5e: 1f:26:fe:8e:50:47:c2:74:a3:7c:9e:f0:eb:d5:c9:26:bf:71: 5b:8a:cd:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI2NDMxMTAvBgNVBAUTKDMyMzlDMEFDODJEOTQyNzJBNkEwOURGQjJBOTBBNjY3 MzA5QjM4NzMwHhcNMjQwNDI3MDIzOTAwWhcNMjQwNTA0MDIzOTAwWjAYMRYwFAYD VQQDEw02NjJjNjU0NS05ZDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5h5KsqiKcmtyTLrhmm6QpbonVzc/epF6t9NlEzQ6p24JLeKuhQAVrfRurOcz uXR0ZrQcr2fq8a2WxkQvz+3cvawGPrgTxIP41zOc4vYpcTUPGeUO7gFSEDrTxPsE EltNiTEAk5DFt6n9Us4f67vazozhAOm1CujL9RVdiYnrNjUoJvpNqoD0YcchQKHL rBXK0c7ZLL37FLjUeV6xIS7yY+Wtl7hX59oPvmlSm8Ho/SRirpTWhDZIvx3xFqcu bSZp+mH+TnUHLX5o4sC6XXaUSE4dJQlkiPNbTooCs+dAObP6a+ue6dTjKXD4FwwN 2Oz8j9hNzIfyksndHQeCKG1lhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsV9rCE 56nGDLWdIcRLJYfVQfdkMB8GA1UdIwQYMBaAFDI5wKyC2UJypqCd+yqQpmcwmzhz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjY0My83MzgwNTJBRTU3 NDgxMUVDQjQyNTJCODZDNEY5QUUwMi9Nam5BcklMWlFuS21vSjM3S3BDbVp6Q2JP SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01qbkFySUxaUW5LbW9KMzdLcENtWnpDYk9ITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjY0My83MzgwNTJBRTU3NDgxMUVDQjQyNTJCODZDNEY5QUUwMi9Nam5BcklMWlFu S21vSjM3S3BDbVp6Q2JPSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhizMw6RaLI07FZLhDbQPLIUKreRS4iuby8aBFv5J4RK0VQaINV7NM qvoQEsEVt7aGZlHYNIrPAcdvCITXACB4Gj8C49i0r/ojzybFpbl8FqeavTVWCCv8 N4COTThrGJRsEhX10QHiyO5X08jx6uuMcX2JCxjv7vPTb3xvbsYHJqnjE3am4jsg c/MDwf5WDBZwApPSnkUALBQlSPPLUmatjORgbpPv3jME6iEjQObrqtkufTH0Af1+ A/EqHJD3vnTicEBP3AREURzreeld71iwrvk1T9p41qI/x5a5a3ub6wpkB0BZ8/Mn Tl4fJv6OUEfCdKN8nvDr1ckmv3Fbis1J -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:55 2024 by rpki-client on console-ams.rpki-client.org